Daily Dose of Dark Web Informer - February 10th, 2026

🌐

DARK WEB INFORMER

⚡ Daily Threat Intelligence Digest

🔑 API Access Now Available

High-volume threat intelligence, ransomware data, IOC exports, and comprehensive feed access for security teams and researchers.

🔥 Advertising Opportunities

Reach a highly engaged audience of 42,400+ unique users monthly and growing. View details

📅 Last 30 days (as of Feb 3, 2026). Next update on Feb 28th.

💚

Your contributions help continue monitoring threats and keeping the community informed.

Click address to copy • ETH address accepts USDT, USDC, and other ERC-20 tokens

📌 Legend

📰 Law Enforcement – LEA updates, investigations

⚠️ Dark Web Notices – forums, markets, announcements

❗️ Urgent Threats – breaches, ransomware, vulnerabilities

💡 Insights & Tools – guides, OSINT, learning resources

🔒 Subscribers Only – X/Twitter click to subscribe

Website Posts

❗️ Argentine Contact Center Platform Neotel Allegedly Breached, 773K Customer and Call Records Leaked PLUS / PRO / ELITE

❗️ Critical Pre-Auth RCE Vulnerability in BeyondTrust Remote Support & PRA Exposes Thousands of Instances (CVE-2026-1731) FREE

❗️ XML Signature Wrapping Vulnerability in SAP NetWeaver ABAP Enables Identity Tampering and Unauthorized Access (CVE-2026-23687) FREE

X/Twitter Updates

❗️ 🇨🇴 A data set allegedly from Inter Rapidísimo (http://interrapidisimo.com), described as Colombia's largest cargo and courier company, has been posted with 661,126 customer records.

‼️ New Ransomware Group: Reynolds

‼️ The database of WormGPT.AI, a hacking-focused AI platform, has been leaked with over 19,000 unique user records posted for download.

‼️ A data set allegedly from Cryptoxscanner[.]com, a cryptocurrency scanning platform, has been posted for sale containing over 13,000 user records.

‼️ 🇦🇷 Argentine Contact Center Platform Neotel Allegedly Breached, 773K Customer and Call Records Leaked

‼️ 🇫🇷 A data set allegedly from Atalian (formerly TFN), a French outsourced services company specializing in cleaning, security, reception, and building maintenance, has been posted with 4,198,129 rows.

‼️ A private shellcode loader with AV/EDR bypass capabilities is being sold starting at $500 for a lifetime license.

❗️ 🇷🇺 A data set allegedly from casio[.]ru, the Russian arm of Casio, has been posted with over 2 million records.

‼️ 🇸🇦 Domain user access to a Saudi Arabian airports and air services transportation company with $650K+ in revenue is being auctioned.

‼️ Cl0p Ransomware Claims 21 Victims

‼️ CISA has added 6 vulnerabilities to the KEV Catalog

💡 Story of my life. 😭

‼️ Sinobi Ransomware Claims 4 Victims

‼️ 0APT Locker identified

‼️ 🇫🇷 A data set allegedly from lesburgersdepapa[.]fr, a French burger restaurant chain, has been posted with 242,706 records.

❗️ 🇦🇺 RDP access with user rights to an Australian machinery and equipment company with $12M+ in revenue is being sold for $800.

💡 Ashok: A OSINT Recon Tool

💡 GitHub Advisories, which is currently only available to Elite subscribers, got some performance updates today. I'm thinking it will be available at the end of February, but I haven't decided on what tier.

‼️ 🇺🇸 A U.S. military aerospace simulations and defense contractor is being sold for $400, with root RCE, shell access, and a hijacked admin panel session on a Linux firewall device.

‼️ Root RCE and full admin panel access to a South American manufacturing company is being sold for $200. The target runs Linux with firewall device access.

‼️ 🇨🇴 Access to the Colombian Government Emergency Response Agency is being sold for $300, with root RCE, shell, and network admin panel on a Linux firewall device.

‼️ 🇵🇪 Access to Peru's capital regional government portal is being sold for $200, with root RCE, shell, and network admin panel on a Linux firewall device.

‼️ 🇨🇳 Root RCE and full admin panel access to a Chinese agentic AI edge-as-a-service (EaaS) corporation is being sold for $200. The target runs Linux with firewall device access.